Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/QZqq-wZFBzpjd34x80uHQnZaO_U.roa
File: QZqq-wZFBzpjd34x80uHQnZaO_U.roa (raw, json)
Hash identifier: lK8ufYaGvzWRvyVxB/BipdI/bH/FoKtGbLKDL5dlvVY=
Subject key identifier: 41:9A:AA:FB:06:45:07:3A:63:77:7E:31:F3:4B:87:42:76:5A:3B:F5
Certificate issuer: /CN=0a3e33cc6e43376ad6a110d851016ddcce783237
Certificate serial: 01281458
Authority key identifier: 0A:3E:33:CC:6E:43:37:6A:D6:A1:10:D8:51:01:6D:DC:CE:78:32:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/QZqq-wZFBzpjd34x80uHQnZaO_U.roa
Signing time: Sat 01 Jan 2022 10:03:50 +0000
ROA not before: Sat 01 Jan 2022 10:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 93.93.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19403864 (0x1281458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e33cc6e43376ad6a110d851016ddcce783237
Validity
Not Before: Jan 1 10:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419aaafb0645073a63777e31f34b8742765a3bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:8e:73:8c:c8:2e:81:d7:87:59:cd:1a:30:
f7:38:bc:5c:d2:e9:65:63:3b:cd:88:36:22:d6:64:
ad:5e:05:9c:91:ea:77:7e:29:a4:18:e1:03:18:f6:
6a:de:5f:90:b3:30:39:cf:7f:9a:45:b0:b7:56:e2:
c5:78:7e:77:24:95:0c:d9:94:86:ca:5a:94:a5:23:
4f:6c:13:a1:ae:f1:37:27:db:91:04:f7:01:13:c4:
b1:66:90:75:04:8e:da:a4:ba:0d:b9:06:7c:4c:d5:
a1:4b:68:15:67:41:33:d5:56:28:91:6d:8d:12:40:
27:ac:35:28:6f:53:59:ec:36:1e:29:a6:a0:37:75:
9b:4a:e7:72:17:45:6a:1a:3d:e8:01:98:5f:2c:60:
4d:23:d6:02:8f:f2:d4:75:82:f1:86:44:78:ff:02:
4b:76:1b:02:60:27:63:c6:51:af:93:95:d8:61:86:
55:8e:84:6e:0c:c3:c1:4b:d3:ae:7c:3d:52:5f:10:
8c:99:81:59:e4:3a:93:71:0f:82:01:ef:2d:25:fe:
6e:d4:77:05:5c:ad:fb:b7:b0:c0:43:73:c4:d9:51:
7f:06:1b:59:52:b2:5f:de:a6:cb:b5:8a:ba:00:34:
c1:ed:b1:12:77:dc:a1:57:c7:78:1a:b7:e8:1f:82:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:AA:FB:06:45:07:3A:63:77:7E:31:F3:4B:87:42:76:5A:3B:F5
X509v3 Authority Key Identifier:
keyid:0A:3E:33:CC:6E:43:37:6A:D6:A1:10:D8:51:01:6D:DC:CE:78:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/QZqq-wZFBzpjd34x80uHQnZaO_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9f:5f:0a:a3:8c:8e:93:18:d8:7c:b8:81:d0:8c:a7:34:e6:
fa:f7:c2:b9:a2:02:df:2e:e0:18:7c:4c:59:7c:fd:5d:aa:f6:
45:a8:ee:8e:80:77:b5:ce:a7:3c:d9:ba:3f:8f:7e:b2:f1:b1:
e0:bc:12:01:aa:cf:f7:08:39:0c:bb:ba:22:e5:59:f4:9e:c0:
67:3a:b3:07:4f:54:1b:1c:88:0f:e5:90:ca:a7:9c:84:18:8c:
45:5e:44:a0:37:7b:66:3d:bf:93:56:a8:9f:5a:4f:c5:6e:77:
7b:99:8e:21:f9:d0:ba:d5:30:5e:1e:6a:f8:98:e9:1c:f8:5f:
00:09:81:88:9d:0b:e8:a5:87:8f:66:18:bf:a5:93:d3:20:7c:
c2:99:92:f8:e3:8a:89:4b:71:36:c9:5f:65:38:b4:26:c1:43:
7b:0a:bf:1a:1d:ac:9f:03:67:26:bf:87:ae:37:d3:d1:b9:6a:
3a:39:93:48:a3:27:30:65:59:8b:78:46:a9:73:e7:22:16:6f:
9c:fb:9b:ef:42:ef:72:7a:84:fe:ca:58:80:73:dc:8b:f5:6d:
4a:a6:2d:f3:7c:cb:b0:c3:8c:91:98:a6:09:3a:67:71:10:6e:
71:36:1a:75:ad:fc:3d:36:73:12:25:99:a5:20:2e:13:bf:62:
ef:c8:b0:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASgUWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YTNlMzNjYzZlNDMzNzZhZDZhMTEwZDg1MTAxNmRkY2NlNzgzMjM3MB4XDTIyMDEw
MTEwMDM1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDE5YWFhZmIwNjQ1
MDczYTYzNzc3ZTMxZjM0Yjg3NDI3NjVhM2JmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZfjnOMyC6B14dZzRow9zi8XNLpZWM7zYg2ItZkrV4FnJHq
d34ppBjhAxj2at5fkLMwOc9/mkWwt1bixXh+dySVDNmUhspalKUjT2wToa7xNyfb
kQT3ARPEsWaQdQSO2qS6DbkGfEzVoUtoFWdBM9VWKJFtjRJAJ6w1KG9TWew2Himm
oDd1m0rnchdFaho96AGYXyxgTSPWAo/y1HWC8YZEeP8CS3YbAmAnY8ZRr5OV2GGG
VY6EbgzDwUvTrnw9Ul8QjJmBWeQ6k3EPggHvLSX+btR3BVyt+7ewwENzxNlRfwYb
WVKyX96my7WKugA0we2xEnfcoVfHeBq36B+C7DUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRBmqr7BkUHOmN3fjHzS4dCdlo79TAfBgNVHSMEGDAWgBQKPjPMbkM3atah
ENhRAW3czngyNzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NqNHp6RzVETjJyV29SRFlVUUZ0M001NE1qYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2YvYzQwYzJmLWUxNDgtNDNlNy1hNTIzLTZhYTNmMTQxYzZlZS8x
L1FacXEtd1pGQnpwamQzNHg4MHVIUW5aYU9fVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Yv
YzQwYzJmLWUxNDgtNDNlNy1hNTIzLTZhYTNmMTQxYzZlZS8xL0NqNHp6RzVETjJy
V29SRFlVUUZ0M001NE1qYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1dzzANBgkqhkiG9w0BAQsFAAOC
AQEAiJ9fCqOMjpMY2Hy4gdCMpzTm+vfCuaIC3y7gGHxMWXz9Xar2RajujoB3tc6n
PNm6P49+svGx4LwSAarP9wg5DLu6IuVZ9J7AZzqzB09UGxyID+WQyqechBiMRV5E
oDd7Zj2/k1aon1pPxW53e5mOIfnQutUwXh5q+JjpHPhfAAmBiJ0L6KWHj2YYv6WT
0yB8wpmS+OOKiUtxNslfZTi0JsFDewq/Gh2snwNnJr+HrjfT0blqOjmTSKMnMGVZ
i3hGqXPnIhZvnPub70LvcnqE/spYgHPci/VtSqYt83zLsMOMkZimCTpncRBucTYa
da38PTZzEiWZpSAuE79i78iw3A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:43 2023 by rpki-client on console-ams.rpki-client.org